Thanks for the help. I had missed one of the extensions lines in the openssl.cnf. My apologies for the confusion, I did mean the X.509v1 certificate.
Thanks, -Tony -----Original Message----- From: Dr. Stephen Henson [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 01, 2002 1:50 PM To: [EMAIL PROTECTED] Subject: Re: SSLv1 Signed CSR? On Thu, Aug 01, 2002, [EMAIL PROTECTED] wrote: > Does anyone know if I can generate a SSLv1 CA and sign an SSL > certificate in v1 with openssl? > > > > I've generated CA with openssl and SSLeay and can get a v3 & v2 signed > certificates, but we have this old/ancient SSLv1 > > compatible only software (that's currently being rewritten) but > Versign, Thawte, and other CA's are no longer supporting > > the SSLv1 certificate. > > > > If anyone has any possible suggestions I'd greatly appreciate your > time and response. > > If you mean X509 v1 then yes you can generate those by commenting out the extension lines in openssl.cnf Steve. -- Dr. Stephen Henson [EMAIL PROTECTED] OpenSSL Project http://www.openssl.org/~steve/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
